fdmc.school.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8b:a8:67:10:e7:15:f5:08:12:bc:31:c0:29:e0:b2:d9:49 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fdmc.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8b:a8:67:10:e7:15:f5:08:12:bc:31:c0:29:e0:b2:d9:49
Serial Number (int): 308859952249986535924552723853241490790729
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0f:6e:b6:2b:07:a7:58:00:df:95:e8:a9:c1:fd:9d:90:ea:bb:07:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 16:60:f1:51:a4:f0:e9:86:c8:e2:dd:37:ff:e2:7f:e7:02:47:28:07
Fingerprint (sha256): 25:fa:53:88:f6:dc:86:18:70:46:5b:fa:32:94:df:1c:31:13:bb:7a:18:ec:71:da:20:64:03:28:79:ff:16:81

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fdmc.school.nz

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fdmc.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arrowtownrugby.co.nz
athleticsotago.co.nz
aucklandsoftball.org.nz
canoepolohb.co.nz
cashmere.school.nz
cfc.co.nz
chbc.school.nz
christchurchfootballclub.co.nz
countiesmanukaurugbyleague.co.nz
cra.kiwi
cricketwellington.co.nz
darel.co.nz
ellerslieeagles.co.nz
fdmc.school.nz
fenciblefoundation.co.nz
freyberg.ac.nz
giafc.co.nz
gijfc.co.nz
golfnorthland.co.nz
harbourgolf.co.nz
hastingsboys.school.nz
haumoana.school.nz
hbrugby.co.nz
healthyfamilieswaitakere.org.nz
hjac.org.nz
hockeywanganui.org.nz
horouta.co.nz
huianetball.co.nz
ie19.co.nz
ie19.nz
jonesyyouthfoundation.co.nz
kartsport.org.nz
kirweerugby.co.nz
kiwitagnz.co.nz
kuranuicollege.school.nz
leamingtonrugby.co.nz
lindisfarne.school.nz
lrsc.co.nz
mahe.kiwi
malvernnetball.co.nz
manawatusoftball.co.nz
manawatusoftball.org.nz
maniapoto.school.nz
manukauaucklandvolleyball.co.nz
maoribasketball.com
marlboroughnetball.org.nz
marlboroughtrampingclub.co.nz
membermanager.co.nz
metrofootball.org.nz
mff.nz
mitre10park.co.nz
mmc.school.nz
myvolleyball.co.nz
naenaeswimclub.co.nz
nzssct.co.nz
nzteachersgames.co.nz
omuafc.org.nz
oxfordcres.school.nz
parklandsrugby.co.nz
patoka.school.nz
pbhockey.co.nz
pioneerfishingclub.co.nz
polo.org.nz
porthillunited.co.nz
prebbleton.com
rotoruaunited.co.nz
shirleyrugby.co.nz
sked.co.nz
skeggsfoundation.nz
soulutionzsports.nz
sportsafe.co.nz
sporty.org.nz
sportycrm.co.nz
sportycrm.com
st-marys-wellington.school.nz
stmaryswellington.school.nz
stmw.school.nz
supercrm.co.nz
supercrm.kiwi
supercrm.nz
taradaleint.school.nz
unimountbohs.org.nz
volleysouth.org.nz
waihibeachtennisclub.co.nz
wanakafootball.nz
wdta.org.nz
whangareibridgeclub.nz

Other certificates including the domain name fdmc.school.nz

(limited to 100 certificates)
cartoonsbyjim.com
www.giafc.co.nz
sporty.org.nz
www.sportsground.com
www.fdmc.school.nz
fdmc.school.nz
pp.fdmc.school.nz
sporty.org.nz
pp.fdmc.school.nz
sporty.org.nz
fdmc.school.nz
sporty.org.nz
www.chbc.school.nz
pp.fdmc.school.nz
sporty.org.nz
www.fdmc.school.nz
chbc.school.nz
sporty.org.nz
cartoonsbyjim.com
www.fdmc.school.nz
pp.fdmc.school.nz
cartoonsbyjim.com
sporty.org.nz
cartoonsbyjim.com
www.fdmc.school.nz
pp.fdmc.school.nz
fdmc.school.nz
www.fdmc.school.nz
fdmc.school.nz
pp.fdmc.school.nz
pp.fdmc.school.nz
www.fdmc.school.nz
fdmc.school.nz
pp.fdmc.school.nz

Certificate

The complete raw certificate details for fdmc.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBswzFDpXfYKLnK5JcSZ
OG4haOMpmD7wqE+HQg5V5XTAZE/gx5ATkE3ho49UClN9syPvIkyie9u3K+6JQ/ql
K0WaByyRkMmk2mFHcWMbqL56hLNreR10UaxzYo8chr872ny+lO7bPcbTHQyJegqH
p2VC+zzMe3ecnNR1KS2P2nGVj86iipWy88DSIAhDZKljnFNFTr1s/zeVO0Vyba7I
wsIblSCNepe7876KggKuSBZ7e8QBokI/gTRXcaMU3aDSHCuifV/H4jWS1qbQvo2r
HERM+aRUyQQukhjowMKUaDcrRLgP10Llp9ZONM4RdjIokoPW9UkixGHz9aRbwFaR
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308859952249986535924552723853241490790729
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 11:45:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 11:45:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fdmc.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23746209526895517501911771254787205321432426699887422868737909876110396248824316230980842145055117022441356411946486209561418999787346601590435751032537821079087432470792587942556459937734325719835274727269619997988642301086141064452261955456648912224553365019255083369352863345243405163191114816333360436221711237363077021842936799737270806672060568696461285509404133507841840309440857124982248619112182445912304555100802641804579741366762946427428390781417922023780366472628516011597105205257837677665242666100063388372439751017508047451472897952500934029069791485752939648294894369880146578987929809229288746422581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f6eb62b07a75800df95e8a9c1fd9d90eabb079b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1726 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowtownrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticsotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canoepolohb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chbc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchfootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cra.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketwellington.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellerslieeagles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdmc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fenciblefoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freyberg.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gijfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsboys.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haumoana.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamilieswaitakere.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjac.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeywanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horouta.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huianetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie19.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie19.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonesyyouthfoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirweerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwitagnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuranuicollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leamingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindisfarne.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahe.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malvernnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manawatusoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manawatusoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maniapoto.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukauaucklandvolleyball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughtrampingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membermanager.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrofootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mff.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitre10park.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myvolleyball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naenaeswimclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzssct.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omuafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxfordcres.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parklandsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patoka.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porthillunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbleton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotoruaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skeggsfoundation.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soulutionzsports.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsafe.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportycrm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportycrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-marys-wellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryswellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmw.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercrm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercrm.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercrm.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unimountbohs.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleysouth.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanakafootball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareibridgeclub.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170a59448200000040300473045022100ef190aecbe0804a86527bff7dde40d6aa92a85ce099b425cce527beb289e48a302206f8666ed6889220130855c471a7b9fda55216a9fc4ba86fc6924edb3c8290733007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a594480e00000403004730450220649414caa4eea23e88058c61f81771d0ca5924032ce207176ae771f010cba543022100e31906d568d272e6c507dfdae17a8994936d721656bfedeefe39e99a9acddf61
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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